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1 This action is in response to the communication filed on 10/12/2007. 

2 DETAILED ACTION 

3 Remarks 

4 The examiner notes that the markings indicating changes in claim 20 of the amendment 

5 filed 10/12/2007 appear to be mistakenly duplicated from the communication filed 6/7/2007. As 

6 such, in order to not further delay the prosecution of this application, the examiner has not held 

7 the amendment as non-compliant. 

8 EXAMINER'S AMENDMENT 

9 An examiner's amendment to the record appears below. Should the changes and/or 

10 additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 

11 1 .3 12. To ensure consideration of such an amendment, it MUST be submitted no later than the 

12 payment of the issue fee. 

13 Authorization for this examiner's amendment was given in a telephone interview with 

14 David Brush on 1/23/2008. 
15 

16 

17 Please replace the current claims with the amended claim listing beginning on the 

18 following page: 
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20. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values G P 2 2 >* *>2m anc * respective public values 
G p G 2 ,...,G m , each pair of values<2,,G ( . verifying either the equation G i -Q. v =lmodn or the 

equation G, =Q { V modrc, wherein m is an integer greater than or equal to 1, / is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by /?,,..., p /9 at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2*, and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ( for / = l v ..,mis such that G i ^g i modn, wherein g i for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors /? p ..., p f , and g ( . is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed such that: R = r v mod n , wherein r is an integer randomly chosen by the 
demonstrator; 

choosing m challenges d l ,d 2 ,...,d m randomly; 
sending the challenges d v d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value computed 
such that: D = r • Q* 1 • Q 2 2 • ... • Q m dm mod n ;and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v •G,^ 1 •G 2 ^ 2 •...*G m £mdm mod n is equal to the commitment R, wherein, for / = l,...,m, 
e i = +1 in the case G ( . • Q- = 1 mod n and e i = -1 in the case G t = Q" mod n . 
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21. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values Q l ,Q 2 ,-.,Q m and respective public values 
G p G 2 ,...,G m , each pair of valuesQ^G- verifying either the equation G, 2/ =lmodn or the 
equation G ( . modn, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p { ,...,p fy at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2*, and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ( . for i = l,...,m is such that G i = g. 2 modrc, wherein g.for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p p ..., p f , and g. is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed using the Chinese remainder method from a series of commitment components Rj , the 

commitment components Rj having a value such that: Rj -r } v mod Pj for j = l,...,/, wherein 
r p ...,/y is a series of integers randomly chosen by the demonstrator; 

choosing m challenges d v d 2 ,...,d m randomly; 

sending the challenges d l ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
series of response components Dj using the Chinese remainder method, the response 

components D- having a value such that: Dj = r- • Q ]J dl • Q 2 j dl • ... • Q mJ dm mod p } for 
7 = 1,...,/, wherein Q i} =£>. mod/? y for / = l,...,m and j = l, ...,/; and 
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determining that the demonstrator is authentic if the response D has a value such that: 
D v •G l eA •G 2 £ldl •".•G m fmdm mod n is equal to the commitment /?, wherein, for / = l,...,m, 
£. = +1 in the case G, • Q, v = 1 mod n and € i = -1 in the case G,. = Q- mod n . 

22. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values GpG 2 > >2 m and respective public values 
G p G 2 ,...,G m , each pair of valuesg.,G, verifying either the equation G ( Q ( v =lmod« or the 
equation G, =Q- V modn, wherein m is an integer greater than or equal to 1, / is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p f , at least two of these prime factors being different from each 
v other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G,.for i = l,...,m is such that G,. =g. 2 modn, wherein g. for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p p ..., p f , and g i is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T-h(M,R), wherein h is a hash function, M is a message received from the demonstrator, 

and R is a commitment having a value computed such that: R = r v mod n , wherein r is an 
integer randomly chosen by the demonstrator; 

. choosing m challenges d v d 2 ,...,d m randomly; 
sending the challenges d li d 2 ,...,d m to the demonstrator; 



Application/Control Number: 09/889,918 
Art Unit: 2131 



Page 6 



receiving a response D from the demonstrator, the response D having a value such that: 
D = r • Q/ 1 • Q/ 2 • ... • Q m d - mod n ; and 

determining that the message M is authentic if the response D has a value such that: 
h(M,D v • G 1 £y/l •G 2 f ^ 2 •...•G m £mdm modnjis equal to the token T , wherein, for / = l,... ) m, 

£ f . = +1 in the case G, • Q/ = 1 mod n and e i = -1 in the case G, = Q ( v mod n . 

23. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values GpG 2 >-->G m and respective public values 
G p G 2 ,...,G m , each pair of valuesQ p G ( verifying either the equation G i =lmodAz or the 

equation G- =Q. V modn, wherein m is an integer greater than or equal to 1, / is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G^for / = l,...,m is such that G ( = g. modrc , wherein g ( for / = l,...,m 
is a base number having an integer value greater than 1 and smaller than each of the prime factors 
p lv .., p f , and g ( . is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T = h(M,R), wherein h is a hash function, M is a message received from the demonstrator, 

and R is a commitment having a value computed out of commitment components R } by using 
the Chinese remainder method, the commitment components Rj having a value such that: 
Rj = r y v mod p. for 7 = 1,...,/, wherein r l9 ... 9 r f is a series of integers randomly chosen by the 
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demonstrator; 

choosing m challenges d li d 2 ,... J d m randomly; 

sending the challenges d { ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
series of response components D } using the Chinese remainder method, the response 

components D } having a value such that: Dj = ^•Q l di •Q 2j d2 •...•Q mj dm mod pjfor 
j = 1,...,/ , wherein Q. . =Q i mod pj for / = l,...,m and 7 = 1,...,/ ; and 

determining that the message M is authentic if the response D has a value such that: 
h(M,D v •G* a •G/v •...•G m £mdm modn)is equal to the token T , wherein, for / = l,...,m, 

e i = +1 in the case G, • Q- - 1 mod n and e. ~ -1 in the case G ( = mod . 

24. (Previously Presented) The computer implemented process according to claim 20, wherein 
the challenges are such that 0 < d i < 2 k -1 for i = l,...,m . 

25. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values Q v Q 2 > - ,Q m and respective public values 
Gj,G 2 ,...,G m , each pair of values Q ( . , G f - verifying either the equation G ( . Q- =1 modn or the 
equation G ( =g/ modn, wherein m is an integer greater than or equal to 1, / is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p x ,...,p f , at least two of these prime factors being different from each 
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other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
.v = 2*, and wherein A: is a security parameter having an integer value greater than 1, and 
wherein each public value G, for / = l,...,m is such that G ( = modrc, wherein g,for 
/ = l,..,,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors /?,,..., p f , and g i is a non-quadratic residue of the ring of integers modulo n ; 

recording a message M to be signed; 

choosing m integers r ( randomly, wherein / is an integer between 1 and m ; 
computing commitments R t having a value such that: R i =.r" mod n for i = l,...,m ; . 

computing a token T having a value such that T = h{M y R x ,R 2 ,...,R m ) , wherein h is a 
hash function producing a binary train consisting of m bits; 

identifying the bits d i ,d 2 , t ..,d m of the token T ; 
computing responses D t = n t - Qf** mod n for / = l,...,/n ; and 

performing at least one of transmitting the token T and the response Di to at least one 
verifying entity, or storing the token T and the response Di on a database 
accessible to the public or to at least one verifying entity. 

26. (Previously Presented) The computer implemented process according to claim 25, further 
comprising: 

collecting the token T and the responses £>,. for / = l,...,m ; and 

determining that the message M is authentic if the responses Di have a value such that: 
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-G* a modn,D 2 v -G/ 2 " 2 mod n,...,D m v -G m e ^ m mod*) 

is equal to the token T, wherein, for / = l,...,m, f. =+1 in the case 
G, * Q. v = 1 mod n and e. = -1 in the case G, = Q. v mod n . 

27. (Cancelled) 

28. (Cancelled) 

29. (Previously Presented) The computer implemented process according to claim 21, wherein 
the challenges are such that 0 < d i < 2 k - 1 for i = l,...,m . 

30. (Previously Presented) The computer implemented process according to claim 22, wherein 
the challenges are such that 0<d i <2 k -\ for i = l,...,m. 

31. (Previously Presented) The computer implemented process according to claim 23, wherein 
the challenges are such that 0 < d i < 2 k - 1 for i = l,...,/n . 

32. (Currently Amended) A computer readable m e dium memory storing instructions which 
when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q l ,Q 2 , ~>Q m and respective public values 

G,,G 2 ,...,G m , each pair of valuesQ^G^ verifying either the equation G i Q- = 1 modn or the 
equation G f =2/ modn, wherein m is an integer greater than or equal to 1, / is an integer 
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between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G i for / = l,...,m is such that G i =g i modn, wherein g. for 
/ = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p l9 ... 9 p f , and g. is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed such that: R = r v mod n , wherein r is an integer randomly chosen by the 
demonstrator; 

choosing m challenges d l ,d 2 ,...,d m randomly; 
sending the challenges d x ,d 2 ,... 9 d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value computed 
such that: D = r - Q* 1 • Q 2 dl • ... • Q m dm mod n ; and 

determining that the demonstrator is authentic if the response D has a value such that: 
£) v . Gj^' -G/ 2 ^ '...-G m £mdm modrt is equal to the commitment R, wherein, for / = l,...,m, 

€ i - +1 in the case G t • Q t v = 1 mod n and e i = -1 in the case G ( . = Q t v mod n . 

33. (Currently Amended) A computer readable medium memory storing instructions which 
when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q l ,Q 2 i ",Q m and respective public values 
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GpG 2 , ...,(/„ , each pair of valuesgpG,. verifying either the equation G, -Q- v =1 modn or the 
equation G i =Q. V modrc, wherein m is an integer greater than or equal to 1, / is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p l9 ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G. for / = l,...,wis such that G, = g, 2 mod n, wherein g { for 
/ = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors /?,,..., p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed using the Chinese remainder method from a series of commitment components Rj , the 

commitment components Rj having a value such that: Rj = r v mod p. for y = l,...,/, wherein 
r x r f is a series of integers randomly chosen by the demonstrator; 

choosing m challenges d l ,d 2 ,. t .,d m randomly; 

sending the challenges d { ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
series of response components Dj using the Chinese remainder method, the response 

components D. having a value such that: D. = r. • Q UJ dl * G 2 ./ 3 ' — ' Qmj m moc * Pj f° r j = h—>f . 
wherein Q i } =Q i mod/? ; for / = l,...,m and j = 1,...,/ ; and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v -G x Exdx *G 2 €ld2 -...'G m £mdm mod n is equal to the commitment R, wherein, for / = l,...,m, 
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e i = +1 in the case G, • Q " = 1 mod n and e x - -1 in the case G, = Q? mod n . 

34. (Currently Amended) A computer readable m e dium memory storing instructions which 
when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q { ,Q 2 ,»>,Q m and respective public values 

G p G 2 ,...,G m , each pair of valuesg^G,. verifying either the equation G i Q- = lmodn or the 

equation G i = Q. V modn, wherein m is an integer greater than or equal to 1, / is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2* , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ( for i = l,...,m is such that G ( = g,. 2 modrc, wherein g ( . for 
/ = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors /?,,..., p f , and g. is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T-h(M,R), wherein h is a hash function, M is a message received from the demonstrator, 

and R is a commitment having a value computed such that: R = r v mod n , wherein r is an 
integer randomly chosen by the demonstrator; 

choosing m challenges d l ,d 1 ,,.,,d m randomly; 
sending the challenges d l ,d 2 ,... l> d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value such that: 
D = r Q l di Q 2 d2 - mod n\ and 
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determining that the message M is authentic if the response D has a value such that: 
h(M,D v <G x £[d[ ' -G 2 £l<il -,..-G m £mdm mod n) is equal to the token T, wherein, for * = l,...,m, 

€ i = +1 in the case G, ■ Q. v = 1 mod n and e i - -1 in the case G, = Q- mod n . 

35. (Currently Amended) A computer readable m e dium memory storing instructions which 
when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q v Q 2 ,... y Q m and respective public values 
G 1 ,G 2 ,...,G m , each pair of values Q-.G,- verifying either the equation G X Q- =lmod/i or the 
equation G. =Q" modn, wherein m is an integer greater than or equal to 1, / is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2* , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G,. for / = l,...,m is such that G i ^g^modn, wherein g i for 
/ = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors /? p ... f p f , and g ( is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T = h(M,R), wherein A is a hash function, M is a message received from the demonstrator, 

and R is a commitment having a value computed out of commitment components Rj by using 
the Chinese remainder method, the commitment components Rj having a value such that: 

Rj =rj V mod Pj for y' = l,...,/, wherein r v ...,r f is a series of integers randomly chosen by the 
demonstrator; 

choosing m challenges d l ,d 2 ,...,d m randomly; 
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sending the challenges d v d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
series of response components Dj using the Chinese remainder method, the response 

components D. having a value such that: D. - r } • Q Uj dl • Q 2 J 2 • ... * Q m J m mod p. for j = 1,...,/ , 
wherein Q u -Q x modp ; for / = l,...,m and 7=1,...,/; and 

determining that the message M is authentic if the response D has a value such that: 
h(M,D v • G^ 1 • G/ 2 ^ * ... • G m £mdm rnodn) is equal to the token 7\ wherein, for i = l,...,m, 

f . = +1 in the case G, * Q x v = 1 mod n and f. = -1 in the case G f - = mod n . 

36. (Currently Amended) The computer readable m e dium memory according to claim 32, 
wherein the challenges are such that 0 < d t < 2 k -1 for i = l,...,m . 

37. (Currently Amended) The computer r e adabl e m e dium memory according to claim 33, 
wherein the challenges are such that 0 < d x < 2 k - 1 for i = l,...,m . 

38. (Currently Amended) The comput e r readable medium memory according to claim 34, 
wherein the challenges are such that 0 < d { < 2 k - 1 for / = l,...,m . 

39. (Currently Amended) The computer r e adable m e dium memory according to claim 35, 
wherein the challenges are such that 0 < d x < 2 k - 1 for / = l,...,m . 

40. (Currently Amended) A computer readable m e dium memory storing instructions which 
when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q v Q 2 ,...,Q m and respective public values 

G p G 2 ,...,G m , each pair of valuesQ^G, verifying either the equation G^Q- =lmod/z or the 
equation G x =Q/ modn, wherein m is an integer greater than or equal to 1, i is an integer 
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between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G t for / = l,...,m is such that G t = g. 2 modrc, wherein g i for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p f , and g. is a non-quadratic residue of the ring of integers modulo n ; 

recording a message M to be signed; 

choosing m integers r x randomly, wherein / is an integer between 1 and m ; 
computing commitments R { having a value such that: R. = mod n for / = l,...,m ; 

computing a token T having a value such that T = h(M ,R^R 2 ,...,R m ) , wherein h is a 
hash function producing a binary train consisting of m bits; 

identifying the bits d l ,d 2t ,..,d m of the token T \ 

computing responses D i = r t • Q. di mod n for / = l,...,m ; and 

performing at least one of transmitting the token T and the response Di to at least one 
verifying entity, or storing the token T and the response Di on a database 
accessible to the public or to at least one verifying entity. 

41. (Currently Amended) The computer readable m e dium memory according to claim 40, the 
method further comprising: 

collecting the token T and the responses D i fori = l,...,m ; and 
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determining that the message M is authentic if the responses D have a value such that: 
h(M,D; -G^' mod n,D 2 v G 2 £ldl mod n,...,D m v -G m £mdm mod/i) 

is equal to the token T , wherein, for / = l,...,m, e i =+1 in the case G, -Q" = 1 mod n and 
e i - -1 in the case G, ~ Q- mod n . 
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2 Allowable Subject Matter 

3 Claims 20-26, and 29-41 are allowed. 

4 The reasons for indicating allowable subject matter are the same as those provided in the 

5 office action dated 5/3/2005 . 

6 Conclusion 

7 Any inquiry concerning this communication or earlier communications from the 

8 examiner should be directed to Matthew T. Henning whose telephone number is (571) 272-3790. 

9 The examiner can normally be reached on M-F 8-4. 

10 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

1 1 supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 

12 organization where this application or proceeding is assigned is 571-273-8300. 

13 Information regarding the status of an application may be obtained from the Patent 

14 Application Information Retrieval (PAIR) system. Status information for published applications 

1 5 may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

16 applications is available through Private PAIR only. For more information about the PAIR 

17 system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

18 system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 

1 9 like assistance from a USPTO Customer Service Representative or access to the automated 

20 information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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